CVE-2024-5660

Published: Dec 10, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass of Stage-2 translation and/or GPT protection.

Affected (16)

Products: Arm: Cortex A710 Firmware, Cortex A77 Firmware, Cortex A78 Firmware, Cortex A78ae Firmware, Cortex A78c Firmware, Cortex X1 Firmware, Cortex X1c Firmware, Cortex X2 Firmware, Cortex X3 Firmware, Cortex X4 Firmware, Cortex X925 Firmware, Neoverse N2 Firmware, Neoverse V1 Firmware, Neoverse V2 Firmware, Neoverse V3 Firmware, Neoverse V3ae Firmware

16 products

Cortex A78ae Firmware

Neoverse V3ae Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A710 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A710	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A77 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A77	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A78 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A78	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A78ae Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A78ae	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex A78c Firmware	All versions

Running on/with	Platform Versions
Arm Cortex A78c	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X1 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X1c Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X1c	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X2 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X3 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X3	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X4 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X4	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Cortex X925 Firmware	All versions

Running on/with	Platform Versions
Arm Cortex X925	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse N2 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse N2	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse V1 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse V1	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse V2 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse V2	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse V3 Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse V3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Arm Neoverse V3ae Firmware	All versions

Running on/with	Platform Versions
Arm Neoverse V3ae	All versions

Related CWEs

CWE-668

Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (1)

https://developer.arm.com/Arm%20Security%20Center/Arm%20CPU%20Vulnerability%20CVE-2024-5660

Source: arm-security@arm.com

Vendor Advisory

Timeline

No history available yet.